CVE-2023-38120

Exploit: Dies ist ein POC für einen Bug, den ich im SmartRG-Router gefunden habe CVE-2023-38120. Es wurde bereits vom Hersteller behoben...

Linux Distros Unpatched Vulnerability : CVE-2026-80707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: j1939: transport: j1939sessionfreshnew: initialize receive buffer Zero the allocated buffer in j1939sessionfreshnew to ensure it contains no residual data...

Linux Distros Unpatched Vulnerability : CVE-2026-80684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails...

Linux Distros Unpatched Vulnerability : CVE-2026-80694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: mtkethsoc: pass eth to mtkhandleirqrx in pollcontroller mtkhandleirqrx expects a struct mtketh matching the requestirq cookie, but...

advisories

Sicherheitshinweise Sicherheitshinweise von Kelly Kaoudis @kaoudis und Freunden. Im Allgemeinen veröffentliche ich hier erst, nachdem der Hersteller den Patch bereitgestellt hat, oder 90 Tage nach Entdeckung der Schwachstelle. Viel Spaß beim Lesen! Die Advisories werden in der Reihenfolge der...

Credential-and-breach-monitoring

Breach / Stealer-Log / Identity Exposure Services Comparison with Scoring Questo documento confronta breach intelligence, monitoraggio del dark web e servizi di esposizione dell'identità su dimensioni pratiche rilevanti per i moderni team di sicurezza. Si concentra su: Profondità del corpus di...

poc

Proof of Concepts Come risultato della scrittura di plugin o semplicemente della caccia ai bug, i ricercatori di Tenable si imbattono spesso in vulnerabilità nuove e interessanti. Queste vulnerabilità vengono condivise con la community sul nostro blog aziendale, Medium, o tramite i nostri advisor...

owasp-cstg

OWASP Cloud Security Testing Guide Der Cloud Security Testing Guide CSTG ist ein umfassendes, anbieterneutrales Handbuch zum Testen der Sicherheit von Cloud-Umgebungen. Es richtet sich an Penetrationstester, Cloud- und Plattformingenieure, Sicherheitsarchitekten, Detection-Engineers und Auditoren...

buyer-eval-skill

Buyer Eval – Die Rotten Tomatoes der B2B-Software Ein kostenloses, quelloffenes Claude-Skill, das B2B-Anbieter bewertet, indem es mit deren KI-Agenten spricht, jede Behauptung mit unabhängigen Quellen abgleicht und bewertet, was verifiziert ist und was nur optimistisches Marketing ist. Neu in v3....

Linux Distros Unpatched Vulnerability : CVE-2026-77117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - glibc - None Red Hat Enterprise Linux - glibc: Non-progress DoS in SHIFTJISX0213 - CVE-2026-77117 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-80489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - glibc - None Red Hat Enterprise Linux - glibc: Non-progress DoS in SHIFTJISX0213 - UCS-4 conversion state CVE-2026-80489 Note that Nessus relies ...

nextpnr

nextpnr -- uno strumento portatile di place and route per FPGA nextpnr mira ad essere uno strumento di place and route per FPGA FOSS, neutrale rispetto al fornitore e guidato dal timing. Attualmente nextpnr supporta: Dispositivi Lattice iCE40 supportati da Project IceStorm Dispositivi Lattice ECP...

GLPI <=10.0.2 - Remote Command Execution

GLPI through 10.0.2 is susceptible to remote command execution injection in /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module. id: CVE-2022-35914 info: name: GLPI =10.0.2 - Remote Command Execution author: For3stCo1d,allendemoura severity: critical description: | GLPI through 10.0...

Linux Distros Unpatched Vulnerability : CVE-2026-79258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via...

Linux Distros Unpatched Vulnerability : CVE-2026-79782

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can...

Linux Distros Unpatched Vulnerability : CVE-2026-79043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-79208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic...

Linux Distros Unpatched Vulnerability : CVE-2026-79151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-78909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the...

Linux Distros Unpatched Vulnerability : CVE-2026-79255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web...